Every firm connects Egnyte with its own OAuth application, registered in the Egnyte developer portal. This guide covers registering the app, collecting the credentials, and entering them in Caddi.
Two values to have ready before you start:
Redirect URI — https://app.trycaddi.com/oauth-callback
Egnyte domain — the subdomain you sign in to, for example acme in https://acme.egnyte.com
Check the rate limit before you rely on this in production. Self-service Egnyte API keys are capped at 2 requests per second and 1,000 requests per day. That ceiling is read-only in the Egnyte UI, and raising it takes a conversation with Egnyte. Loops that move large document sets will hit it.
Before you start
You'll need:
Egnyte domain administrator privileges
An eligible Egnyte plan — Trial, Platform Team, and Legacy Connect domains cannot create API keys
Fewer than five existing API keys on the domain. Egnyte caps it at five.
Owner or Admin access to your Caddi organization
Egnyte can only issue API keys to domain administrators who are not signed in through a Service Account. Register the app as a real administrator; you can still authorize the connection as a service account afterwards.
Step 1: Create your developer portal account
Egnyte moved its developer portal to a new platform, so an older Egnyte developer login may not carry over automatically.
Go to developers.egnyte.com and click Sign In.
If you don't have an account, choose Create an account. Use the same email address as any previous Egnyte developer-portal account so your existing keys carry across.
Verify your email address and sign in.
Keys issued on Egnyte's older developer portal still work — you don't need to reissue them, just sign in with the matching address.
Step 2: Register the application
The redirect URI must be HTTPS and must match https://app.trycaddi.com/oauth-callback exactly — Egnyte compares it character for character against what Caddi sends, both when the user authorizes and again when the token is issued.
Click your username in the top right and choose Apps.
Create a new application.
Application Name —
CaddiApplication Type — select Public Application. An Internal Application has no redirect URI field and cannot be used here.
Egnyte Domain — your own domain, for example
acme.egnyte.com.OAuth Redirect URI — enter
https://app.trycaddi.com/oauth-callback.Accept Egnyte's terms and register the application.
Step 3: Collect the Client ID and Client Secret
Egnyte's help text notes that the client secret is not stored in its UI. Treat it as copy-now and put it straight into a password manager.
Open the application you just registered.
Copy the Client ID — Egnyte also labels this the API Key.
Reveal and copy the Client Secret.
Check the key's status. If it shows as pending, Egnyte still has it in an approval queue — wait for the approval email before connecting.
Some Egnyte domains also expose a Create API Key tile under Admin console → Apps & Integrations, which issues the same pair of credentials and usually skips the approval queue. Either route produces values that work here.
Step 4: Configure Egnyte in Caddi
This step must be completed by a Caddi organization owner or admin.
In Caddi, open Integrations in the left sidebar, then click the Integration Setup tab at the top of the page. This tab is only visible to organization owners and admins.
Find Egnyte in the list and click Configure.
Enter the following values:
Client ID — the Client ID (API Key) from your Egnyte application
Client Secret — the secret paired with that Client ID
Egnyte Domain — the domain you sign in to. Enter just the name (
acme) or the full URL (https://acme.egnyte.com) — both work.OAuth Scopes — leave blank to use Caddi's defaults:
Egnyte.filesystem Egnyte.link Egnyte.permission Egnyte.user Egnyte.group Egnyte.bookmark. AddEgnyte.webhooksorEgnyte.auditonly if a loop uses those features.
Click Save Configuration. Caddi validates the credentials immediately — if something is wrong you'll see an error right away, and nothing is stored until validation passes.
Step 5: Connect your account
Go back to the My Connections tab at the top of the Integrations page.
Find Egnyte and click Connect +.
Sign in to Egnyte and approve the request.
You'll be returned to Caddi with the connection active.
How the connection behaves
Each user connects their own Egnyte account. Caddi sees the folders and files that user can see, and Egnyte's audit trail attributes the activity to them.
A custom connection replaces the standard one. Once you save this configuration, members of your organization are disconnected from any existing Egnyte connection and will only see the option to connect through your app.
Access tokens last 30 days and refresh automatically, so users shouldn't be prompted to reconnect.
Always send explicit scopes. If no scope is specified at all, Egnyte grants global API access by default. Caddi's defaults handle this — the note matters only if you clear the field and enter your own.
Rate limits are the main operational constraint. Self-service keys allow 2 requests per second and 1,000 per day, shared across everyone using the connection. Contact Egnyte about a higher allowance before a document-heavy rollout.
Revoking access. Delete the application in the Egnyte developer portal, which immediately invalidates the credentials for everyone.
Troubleshooting
{"message":"No valid app info found for api key"}
Egnyte has no registered application matching the client ID for that domain. This is the expected error if you try to connect before completing Steps 1–3 — Caddi cannot connect to Egnyte until your firm has registered its own application and supplied the credentials. If you have already registered one, check that the Client ID in Caddi belongs to an app registered against the same Egnyte domain you entered, and that the app shows as approved rather than pending. The address bar will read https://<your-domain>.egnyte.com/puboauth/token, which tells you which domain Egnyte checked the key against.
A redirect error when connecting
Three usual causes, in order of likelihood: the app was registered as an Internal Application rather than a Public Application and therefore has no redirect URI; the URI doesn't match https://app.trycaddi.com/oauth-callback exactly; or it was entered with http instead of https.
There's no option to create an application
Your Egnyte plan is not eligible — Trial, Platform Team, and Legacy Connect domains cannot create API keys — or the domain already has five. Delete an unused key, or contact Egnyte.
The credentials are rejected and the key shows as pending
Egnyte hasn't approved the application yet. Wait for the approval email, then save the configuration again.
Loops fail intermittently with rate-limit errors
You're hitting the 2-per-second or 1,000-per-day ceiling. Reduce how often loops run, narrow the folders they scan, or ask Egnyte to raise the limit.
Caddi connects but can't see expected folders
The Egnyte user who connected doesn't have permission on those folders. Check their folder permissions in Egnyte — Caddi cannot see more than they can.
An older developer-portal login doesn't work
Egnyte migrated its developer portal. Create an account on the new portal using the same email address as the old one and your existing keys will carry across.
Still stuck? Contact Caddi support with the exact error message you're seeing and the time it occurred.
Automation ideas
Law Firms
New matter → folder structure
Caddi provisions the standard Egnyte folder tree for a new matter, applies the right permissions, and records the folder link on the matter in your practice management system.
Incoming document → filed and indexed
Caddi reads an emailed document, works out which matter it belongs to, files it to the correct Egnyte folder under your naming convention, and logs the activity.
Matter closed → archive and retention
When a matter closes, Caddi moves the folder to your archive location, applies the retention policy, and updates the matter record.
Document request → secure share link
Caddi generates the Egnyte share link for the documents a client or co-counsel has asked for, with the expiry your policy requires, and logs what was sent.
RIAs
Client onboarding → document collection
Caddi creates the client's Egnyte folder set, generates a secure upload link for the documents you need, and tracks what's still outstanding.
Quarterly reporting → distribution
Caddi files generated statements into each client's folder and creates the share links for delivery, with nothing landing in the wrong place.
Compliance request → assembled evidence pack
Caddi pulls the documents an examiner has asked for into a single reviewed pack, with a log of exactly what was included.
